PT-2026-29829 · Praisonai · Praisonai

Yerang30 · Published 2026-04-01 · Updated 2026-04-06 · CVE-2026-34953

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions PraisonAI (affected versions not specified)

Description A flaw exists in the token validation process, where the OAuthManager.validate token() function incorrectly returns True for any token not found in its internal store. This store is empty by default, allowing any HTTP request with an arbitrary Bearer token to be treated as authenticated, granting full access to all registered tools and agent capabilities. The vulnerable code is located in oauth.py at lines 364, 374, and 381. An attacker with network access to the MCP HTTP server can call all registered tools, including agent execution, workflow runs, container file read/write, and skill loading. The server binds to 0.0.0.0 by default, requiring no API key.

Recommendations Modify the validate token() function to explicitly reject unknown tokens by returning False if the token is not found in the internal store.

Exploit

Fix

RCE

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-34953

GHSA-98F9-FQG5-HVQ5

Affected Products

Praisonai

References · 8

• 🔥 https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-98f9-fqg5-hvq5 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-34953 · Security Note
• https://osv.dev/vulnerability/GHSA-98f9-fqg5-hvq5 · Vendor Advisory
• https://github.com/MervinPraison/PraisonAI · Note
• https://twitter.com/0dayPublishing/status/2041194139874636218 · Twitter Post
• https://twitter.com/CveFindCom/status/2040213877351207184 · Twitter Post
• https://twitter.com/TheHackerWire/status/2040263319827918959 · Twitter Post
• https://twitter.com/vulert_official/status/2039724332738625748 · Twitter Post